TASK#STOMP PowerShell Backdoor Exploits Sensitive Data and System Credentials

A new PowerShell backdoor named TASK#STOMP steals sensitive data including documents, Wi-Fi credentials, and clipboard content while using evasion techniques like timestomping and redundant C2 channels. The malware employs multiple persistence methods via VBScript and PowerShell to maintain access and avoid detection.

Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive data from compromised hosts.

The backdoor "automatically harvests and exfiltrates business documents, watches the filesystem for new files in real time, steals Wi-Fi passwords and clipboard contents, takes screenshots, and accepts arbitrary

Read original article